What is the name of the domain?
What is the issue you’re encountering
A few days ago I began receiving reports from paying member of my curriculum resources membership site that the normal ‘full screen’ button had been replaced with ‘open in new tab’ in Chrome and ClassIn browsers. It remains the same as always in other browsers like Firefox. I have already contacted my host - Cloudflare - and the iFrame host, Genially, both who claim the change/problem isn’t on their end. Here’s what Genially suggested: “The issue lies in the fact that the server has specified a Permissions-Policy, which is used to restrict or allow certain functionalities in pages embedded within another. The Permissions-Policy is a header that an HTTP server can return to control specific permissions for content embedded via iframe on a page. This only applies to Chrome and modern Edge, as other browsers ignore it. In this case, we can see that a Permissions-Policy header is being returned that attempts to grant fullscreen permissions to Genially (see screenshot). This is something managed on their end. Through our tests, we have confirmed the following: - The domains in the headers are incorrectly configured. Chrome does not accept domains without the https:// prefix. Either the domains and header were recently added, or the domain format has been altered. - The only domain that requires permission is https://view.genially.com; the other URLs do not need such permissions. - Only fullscreen permission needs to be granted; the other permissions specified (see screenshots) are unnecessary from our side.” WP engine said, “it would be possible for someone to set headers via Cloudflare to be applied to the site,” but I have made no changes to settings or permissions in WP, hosting, Genially or otherwise - just thousands of my lessons suddenly affected. Please help!!
What steps have you taken to resolve the issue?
Spoken to support in Genially, and WP engine.
What are the steps to reproduce the issue?
Visit this lesson page in Chrome and Firefox, and see that the full screen button is different. It has always operated like it now appears in Firefox and I need it to remain that way to protect my IP.
https://esl-curriculum.com/lesson/l1-u1-l1-trial-3/
